CVE-2023-24030

An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. Once the token is obtained, an attacker could redirect a us...

CVE-2023-24030

An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. Once the token is obtained, an attacker could redirect a us...

CVE-2023-24030

CVE-2023-24030 describes an open redirect in Zimbra Collaboration Suite’s /preauth servlet up to versions 9.0 and 8.8.15. An attacker must possess a valid zimbra auth or preauth token to trigger a redirect, potentially sending the user to an attacker‑controlled URL if URL sanitisation is bypassed...